Home networks increasingly support important networked applications with limited professional network administration support, while sophisticated attacks pose enormous security risks for networked applications. A Unified Threat Management (UTM) system strives to comprehensively protect a home network by providing firewall, intrusion detection and prevention, as well as antibot protection in an integrated, easy-to-configure manner. Previous surveys have extensively covered the individual components of a UTM system, i.e., there is extensive literature on firewall surveys, intrusion detection and prevention surveys, and antibot protection surveys. Importantly, the previous surveys covered these protection services separately, without considering their integration (however, this integration is critical for comprehensive home network protection). In contrast, the present survey covers for the first time UTM systems, i.e., the integrated network security services provided by a UTM system. This UTM survey is organized according to the UTM components, i.e., we comprehensively survey the firewall methods, the intrusion detection and prevention methods, as well as the antibot protection methods that are suitable for a UTM system for a home network. Throughout, we view these methods from the perspective of integration into a UTM system with limited computational resources and limited network administration support. Our survey includes the protection capabilities, as well as the design and deployment aspects and software/hardware limitations of available off-the-shelf and open-source UTM systems. We find that effective integrated home network protection where the UTM system components synergistically support each other while operating with limited computational resources and network administration support still requires extensive future research and development.

中文翻译：

---

家庭网络统一威胁管理 (UTM) 系统调查


家庭网络越来越多地通过有限的专业网络管理支持来支持重要的网络应用，而复杂的攻击给网络应用带来了巨大的安全风险。统一威胁管理 (UTM) 系统致力于通过以集成且易于配置的方式提供防火墙、入侵检测和预防以及反僵尸程序保护来全面保护家庭网络。以前的调查广泛涵盖了 UTM 系统的各个组件，即，有大量关于防火墙调查、入侵检测和预防调查以及反机器人保护调查的文献。重要的是，之前的调查分别涵盖了这些保护服务，而没有考虑它们的集成（但是，这种集成对于全面的家庭网络保护至关重要）。相比之下，本次调查首次涵盖了UTM系统，即UTM系统提供的综合网络安全服务。本次UTM调查是按照UTM组件来组织的，即全面调查适合家庭网络UTM系统的防火墙方法、入侵检测与防御方法以及反僵尸防护方法。在整个过程中，我们从集成到具有有限计算资源和有限网络管理支持的 UTM 系统的角度来看待这些方法。我们的调查包括现有现成和开源 UTM 系统的保护功能、设计和部署方面以及软件/硬件限制。 我们发现，有效的集成家庭网络保护（其中UTM系统组件在以有限的计算资源和网络管理支持运行的同时相互协同支持）仍然需要广泛的未来研究和开发。